Chain INPUT (policy ACCEPT 1784850 packets, 7313395829 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
  523559 422475324 ACCEPT     0    --  ovn-k8s-mp0 *       0.0.0.0/0            0.0.0.0/0            /* from OVN to localhost */
 1784850 7313395829 KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
    6078   651608 ACCEPT     0    --  ovn-k8s-mp0 *       0.0.0.0/0            0.0.0.0/0           
    4964  2735727 ACCEPT     0    --  *      ovn-k8s-mp0  0.0.0.0/0            0.0.0.0/0           
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT 2031417 packets, 2395282806 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
 2030940 2395210230 KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|19636f6e736f6c652d6f70656e73686966742d636f6e736f6c65036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|03617069036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|076170692d696e74036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|1f63616e6172792d6f70656e73686966742d696e67726573732d63616e617279036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|2664656661756c742d726f7574652d6f70656e73686966742d696d6167652d7265676973747279036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|1b646f776e6c6f6164732d6f70656e73686966742d636f6e736f6c65036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|0f6f617574682d6f70656e7368696674036372630b74657374696e67206372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|0f6f617574682d6f70656e736869667408617070732d6372630774657374696e67|" ALGO name bm

Chain KUBE-FIREWALL (2 references)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 DROP       0    --  *      *      !127.0.0.0/8          127.0.0.0/8          /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT

Chain KUBE-KUBELET-CANARY (0 references)
    pkts      bytes target     prot opt in     out     source               destination         
